HIPAA Notice of Privacy Practices (NPP)

Westover Hills Wellness & Westover Hills Laser Med Spa Effective Date: March 17, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

We are required by applicable federal and state law (HIPAA) to maintain the privacy of your Protected Health Information (PHI). We are also required to give you this Notice about our privacy practices, our legal duties, and your rights concerning your PHI.

We use and disclose health information about you for treatment, payment, and healthcare operations. For example:

• Treatment: We may disclose your PHI to a specialist, physician, or laboratory involved in your aesthetic or wellness care.
• Payment: We may use and disclose your PHI to obtain payment for services we provide to you (e.g., verifying CareCredit eligibility).
• Healthcare Operations: We may use and disclose your PHI in connection with our healthcare operations, such as quality assessment and improvement activities or provider reviews.

• Access: You have the right to look at or get copies of your health information, with limited exceptions.
  
• Disclosure Accounting: You have the right to receive a list of instances in which we or our business associates disclosed your PHI for purposes other than treatment, payment, or healthcare operations.
  
• Restriction: You have the right to request that we place additional restrictions on our use or disclosure of your PHI. We are not required to agree to these additional restrictions, but if we do, we will abide by our agreement (except in an emergency).
  
• Alternative Communication: You have the right to request that we communicate with you about your PHI by alternative means or to alternative locations.
  

Important for Google/Meta Users: We will never sell your PHI to third-party marketers. We will not use your PHI for marketing communications (such as "Before & After" social media posts) without your written authorization. You may revoke such authorization at any time in writing.

In the event of a breach of unsecured PHI, we will notify you as required by law.

If you want more information about our privacy practices or have questions/concerns, please contact us. If you are concerned that we may have violated your privacy rights, you may complain to us using the contact information listed below. You may also submit a written complaint to the U.S. Department of Health and Human Services.

Contact Officer: 

Privacy Compliance Lead 

Address: 11345 Alamo Ranch Pkwy #101, San Antonio, TX 78253 

Phone: 210-463-9033 Email: westoverhillsmedspa@gmail.com